$ rpki-client -vvf rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft File: saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft (raw, json) Hash identifier: 0bSAWgh1yxyD5GnQ3Pb4rmhDYvNcwo2kT4BicIIt/8s= Subject key identifier: 8A:1C:69:C7:27:38:E1:E1:9F:D8:D5:B5:A4:0C:A4:4E:AA:80:EF:7E Authority key identifier: B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF Certificate issuer: /CN=A91683D2/serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Certificate serial: 34B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft Manifest number: 34B0 Signing time: Fri 08 Aug 2025 14:35:28 +0000 Manifest this update: Fri 08 Aug 2025 14:35:27 +0000 Manifest next update: Fri 15 Aug 2025 14:35:27 +0000 Files and hashes: 1: saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl (hash: 2a91WHRS+ORAZZtk5XU9zSoKRJKkX13UvdxCwKpWuDQ=) 2: 2DD1EECEEC7A11EEBAE5E319C4F9AE02.roa (hash: LYYe0/ugE0YWppDV9+N/oSDl4IKiJUQFEaZM88DJJ/s=) 3: 2D58477CEC7A11EEBAE5E319C4F9AE02.roa (hash: JwlADxU15y3Ux/pBiI3TitQwzPcxeHG3v1ZhXPEpRug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13497 (0x34b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91683D2, serialNumber=B1ACFB85149B86A11015D601810E314F6948C1CF Validity Not Before: Aug 8 14:35:27 2025 GMT Not After : Aug 15 14:35:27 2025 GMT Subject: CN=68960b2f-f6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:35:ac:5c:cc:37:92:9f:f6:d2:94:03:91:74: ce:7e:54:c6:07:b9:a9:22:e2:91:1f:97:19:8c:80: 06:1a:bf:a2:3f:a1:3e:2c:2b:02:0f:0b:2f:a7:be: 25:21:a8:e2:14:3d:8e:c8:fd:ac:00:9d:8b:86:92: cc:d1:e0:d9:90:fe:5c:55:0c:f5:ec:a2:2d:63:f3: c8:a3:11:37:61:75:ff:b8:cd:a3:7a:c8:7b:83:63: 58:89:90:31:8b:a1:b9:88:62:53:ec:f2:08:96:af: 73:b0:10:f2:cd:69:8a:37:3a:6f:87:5b:6b:20:8d: 24:1d:06:aa:7d:52:e6:18:a3:45:3e:4c:d1:c2:bb: 4e:be:f8:a5:09:bd:fd:13:40:fe:e9:1c:ce:5e:24: f4:2d:fb:72:4e:21:a3:2a:30:49:a1:9a:39:fa:9d: 87:f5:42:d0:65:62:2d:75:97:3d:49:58:de:e3:7b: 94:0b:46:a3:3a:97:bd:0c:3e:a1:5e:ae:df:b6:12: 6c:5d:fd:f5:a1:c9:c9:49:8b:af:05:14:32:3d:66: 35:b5:26:43:7d:a0:dd:de:07:7d:0e:51:22:8b:13: 18:71:67:81:b7:11:95:bd:ba:e4:99:86:42:d7:49: 78:db:55:01:35:53:bf:0c:4c:bd:ff:00:78:32:2f: de:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1C:69:C7:27:38:E1:E1:9F:D8:D5:B5:A4:0C:A4:4E:AA:80:EF:7E X509v3 Authority Key Identifier: keyid:B1:AC:FB:85:14:9B:86:A1:10:15:D6:01:81:0E:31:4F:69:48:C1:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91683D2/19C55F6C1D8B11E290C578E508B02CD2/saz7hRSbhqEQFdYBgQ4xT2lIwc8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fd:8e:1a:a5:52:29:0e:59:b6:c6:0c:6c:ce:ad:02:7f:b1: 1c:f6:cc:2a:b1:58:79:48:e4:9c:b3:95:24:c4:81:f6:90:14: d0:14:63:e0:6d:50:60:36:ac:e9:70:f7:7f:53:98:30:1b:8a: 1f:a1:19:d3:64:c7:8d:ea:d8:88:20:9a:e7:00:74:f8:0a:db: de:95:7e:3b:88:b3:d8:ff:71:4e:f0:b0:c0:e9:8d:77:f2:62: c8:74:c3:83:f4:3b:ad:4b:a8:37:5a:0f:9d:e6:ec:5b:20:af: 6d:cf:be:10:4d:a0:2a:10:cb:46:ef:e1:90:c7:65:82:57:a1: c3:4e:aa:a2:75:00:5f:48:88:37:e4:2b:19:4b:93:b2:17:e4: e0:b4:6e:88:f0:45:2d:d8:4e:90:2a:3e:0a:54:fe:b5:e4:5f: a6:8c:df:60:09:19:62:db:08:31:74:5a:54:2d:2f:48:c9:5e: ea:d1:e8:4d:d6:13:07:6c:50:2d:3d:b5:1a:cf:16:26:af:50: 2f:c2:bd:89:a4:bc:8d:8b:c4:a7:e2:ee:5d:34:d6:b3:d9:76: e1:3f:08:bf:8e:ce:a3:d0:15:3b:79:ac:34:0b:e3:bd:b6:46: 9e:32:62:14:e5:72:74:c4:d2:21:58:17:05:10:b9:93:fe:50: c0:1c:34:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjgzRDIxMTAvBgNVBAUTKEIxQUNGQjg1MTQ5Qjg2QTExMDE1RDYwMTgxMEUzMTRG Njk0OEMxQ0YwHhcNMjUwODA4MTQzNTI3WhcNMjUwODE1MTQzNTI3WjAYMRYwFAYD VQQDEw02ODk2MGIyZi1mNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlDWsXMw3kp/20pQDkXTOflTGB7mpIuKRH5cZjIAGGr+iP6E+LCsCDwsvp74l IajiFD2OyP2sAJ2LhpLM0eDZkP5cVQz17KItY/PIoxE3YXX/uM2jesh7g2NYiZAx i6G5iGJT7PIIlq9zsBDyzWmKNzpvh1trII0kHQaqfVLmGKNFPkzRwrtOvvilCb39 E0D+6RzOXiT0LftyTiGjKjBJoZo5+p2H9ULQZWItdZc9SVje43uUC0ajOpe9DD6h Xq7fthJsXf31ocnJSYuvBRQyPWY1tSZDfaDd3gd9DlEiixMYcWeBtxGVvbrkmYZC 10l421UBNVO/DEy9/wB4Mi/egQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIocaccn OOHhn9jVtaQMpE6qgO9+MB8GA1UdIwQYMBaAFLGs+4UUm4ahEBXWAYEOMU9pSMHP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODNEMi8xOUM1NUY2QzFE OEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhxRVFGZFlCZ1E0eFQybEl3 YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NhejdoUlNiaHFFUUZkWUJnUTR4VDJsSXdjOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODNEMi8xOUM1NUY2QzFEOEIxMUUyOTBDNTc4RTUwOEIwMkNEMi9zYXo3aFJTYmhx RVFGZFlCZ1E0eFQybEl3YzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc/Y4apVIpDlm2xgxszq0Cf7Ec9swqsVh5SOScs5UkxIH2kBTQFGPg bVBgNqzpcPd/U5gwG4ofoRnTZMeN6tiIIJrnAHT4CtvelX47iLPY/3FO8LDA6Y13 8mLIdMOD9DutS6g3Wg+d5uxbIK9tz74QTaAqEMtG7+GQx2WCV6HDTqqidQBfSIg3 5CsZS5OyF+TgtG6I8EUt2E6QKj4KVP615F+mjN9gCRli2wgxdFpULS9IyV7q0ehN 1hMHbFAtPbUazxYmr1Avwr2JpLyNi8Sn4u5dNNaz2XbhPwi/js6j0BU7eaw0C+O9 tkaeMmIU5XJ0xNIhWBcFELmT/lDAHDT4 -----END CERTIFICATE-----Generated at Sun Aug 10 05:50:40 2025 by rpki-client